
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier: 6pTH3klCs3msRiQ+SCOpbKU99rT+LxajbFs+1m1pUaQ=
Subject key identifier: FA:CE:BB:50:DE:57:A1:85:1E:59:C6:E9:A1:10:6C:CD:BF:91:E7:AD
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number: 01EA
Signing time: Sun 11 Oct 2026 03:59:56 +0000
Manifest this update: Sun 11 Oct 2026 03:59:56 +0000
Manifest next update: Sun 18 Oct 2026 03:59:56 +0000
Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: dvJS2r/DqiJ8j5Epyp2s+D8kS648H/gZlfMAxH+Cang=)
2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: VkTWZOhptlmUjpj+fKDaWZKr/by4lrIHVYy8lO2gJqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 03:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Validity
Not Before: Oct 11 03:59:56 2026 GMT
Not After : Oct 18 03:59:56 2026 GMT
Subject: CN=6acb09bc-b95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:c8:5c:9f:30:b9:fb:a9:3a:b8:ff:ef:9a:
14:b9:49:82:41:45:3a:26:a3:dc:3a:d1:a9:8e:a1:
1c:2f:73:a0:53:a3:cf:a4:1a:48:14:fa:cc:87:19:
4a:fb:19:7c:88:1f:10:cb:6c:9b:30:4d:b6:9a:d3:
71:60:a4:de:bb:69:d2:5c:8a:5e:6d:df:a2:24:55:
d3:f3:a5:37:46:7a:7c:38:48:4d:cc:a1:ae:fb:4a:
f9:c1:1b:35:b9:5a:e4:92:61:07:d1:a9:33:1a:db:
63:b8:35:4f:cd:da:c3:da:8a:81:05:23:75:31:dc:
51:01:f4:b1:a0:ab:7d:98:cc:47:f1:07:da:1e:18:
9a:4a:df:60:68:1b:62:61:e5:ec:08:7a:60:dd:c4:
52:13:4e:1d:60:bc:0a:aa:3a:0f:77:c0:c9:35:a2:
f6:e1:a7:96:ab:f3:3b:a3:ae:66:a9:1d:b1:88:94:
b8:1b:25:6f:d6:94:54:a3:92:bf:1f:65:93:d3:df:
7d:49:c8:fd:03:89:4a:e4:87:f8:02:d5:82:de:7a:
9c:dd:41:d5:b0:cc:c6:ef:d7:3b:ac:8f:44:3f:02:
17:e8:21:0e:0a:ac:c7:19:58:f2:4e:94:a3:79:34:
aa:7b:97:9f:c6:76:fe:81:9c:cd:4a:53:2c:b5:8b:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:BB:50:DE:57:A1:85:1E:59:C6:E9:A1:10:6C:CD:BF:91:E7:AD
X509v3 Authority Key Identifier:
keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:b6:9e:84:2c:0c:5d:f8:e1:a5:86:11:b0:dc:65:62:0d:
33:0b:38:64:36:ee:a8:24:66:6c:79:ec:6c:97:e3:3a:af:28:
5f:be:ab:11:f1:a8:3d:36:09:7d:a2:b0:c9:0d:c4:5d:a6:b4:
24:e6:3a:a1:e8:35:91:ff:cb:19:8c:8c:78:fd:91:8c:97:be:
0a:16:2b:43:6f:2d:22:de:91:cb:ca:e3:9e:be:03:76:47:a6:
83:d5:98:fd:9d:79:24:c3:95:f5:69:6e:d6:af:db:98:4a:c7:
74:d6:1c:43:97:5c:75:8b:02:ac:e9:aa:d8:e8:bc:1a:5e:4d:
e4:e0:27:20:e7:04:dc:f2:aa:92:10:c0:64:9c:89:55:71:e7:
24:c0:e3:0c:08:6d:d6:f7:5c:34:2b:c5:97:3f:65:3e:4e:db:
7c:73:8b:6a:81:b9:46:a0:1b:f1:bc:76:91:53:7b:a4:8a:27:
29:c3:cf:3c:fe:05:9a:6a:05:53:dc:a8:b2:a2:92:fa:8a:e3:
a6:e2:fc:81:f8:9b:e0:37:9d:2c:47:6b:5a:96:3c:f1:17:19:
47:fd:71:a2:c6:30:8c:1d:8d:de:d8:d1:4d:f5:e7:e6:bb:af:
87:7a:39:49:a3:9a:cf:67:2e:8c:91:cf:10:65:5e:d4:f4:b6:
70:3f:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:49:16 2026 by rpki-client